CVE-2019-19108 : Security Advisory and Response
Learn about CVE-2019-19108, a critical vulnerability in B&R Automation Runtime versions 2.96 to 4.72 allowing unauthorized users to manipulate configurations via SNMP. Find mitigation steps and long-term security practices.
B&R Automation Runtime SNMP Authentication and Authorization Weakness is a critical vulnerability that affects B&R Automation Runtime versions 2.96 to 4.72, allowing unauthorized users to manipulate product configurations via SNMP.
Understanding CVE-2019-19108
This CVE involves an authentication weakness in the SNMP service of B&R Automation Runtime, posing a significant risk to the integrity of affected systems.
What is CVE-2019-19108?
The vulnerability in B&R Automation Runtime versions 2.96 to 4.72 enables unauthorized users to modify product configurations using SNMP without proper authentication.
The Impact of CVE-2019-19108
The vulnerability has a CVSS base score of 9.4 (Critical) with high availability and integrity impact, allowing attackers to make unauthorized changes to system configurations.
Technical Details of CVE-2019-19108
This section provides detailed technical information about the vulnerability.
Vulnerability Description
The SNMP service in B&R Automation Runtime versions 2.96 to 4.72 contains an authentication weakness, enabling unauthorized configuration changes via SNMP.
Affected Systems and Versions
- Product: Automation Runtime
- Vendor: B&R
- Versions Affected: 2 <= 2.96, 3 <= 3.10, 4 <= 4.72
Exploitation Mechanism
Unauthorized users can exploit the vulnerability to manipulate B&R product configurations through SNMP without proper authentication.
Mitigation and Prevention
Protecting systems from CVE-2019-19108 requires immediate actions and long-term security practices.
Immediate Steps to Take
- Disable SNMP service if not essential for operations
- Implement firewall rules to restrict SNMP access
- Monitor SNMP traffic for suspicious activities
Long-Term Security Practices
- Regularly update B&R Automation Runtime to patched versions
- Conduct security assessments to identify and address vulnerabilities
- Train staff on secure SNMP configuration practices
Patching and Updates
- Apply patches provided by B&R to address the SNMP authentication weakness